Frost-Glass-V4-Rainmeter-Skin.zip
- SHA256 fa0dec683ea8f724b5abfda00189d618ed02b8571a98d23666952f574ed0afbb
Static task
static1
Behavioral task
behavioral1
Sample
Frost-Glass-V4-Rainmeter-Skin.zip
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
Frost Glass V4 Rainmeter Skin.zip
Resource
win10ltsc2021-20260513-en
AutoIT scripts compiled to PE executables.
| resource | yara_rule |
|---|---|
| static1/unpack002/Skins/Frost Glass V4/@Resources/RainFile/RainFile.exe | autoit_exe |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/Plugins/32bit/FrostedGlass.dll |
| unpack002/Plugins/64bit/FrostedGlass.dll |
| unpack002/Skins/Frost Glass V4/@Resources/Application/RunAndHide.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Application/Task View.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Application/TaskList.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Application/toggle.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Applications/HideDesktopIcons.exe |
| unpack003/foo_cad.dll |
| unpack002/Skins/Frost Glass V4/@Resources/Plugins/x64/FrostedGlass.dll |
| unpack002/Skins/Frost Glass V4/@Resources/Plugins/x86/FrostedGlass.dll |
| unpack002/Skins/Frost Glass V4/@Resources/RainFile/RainFile.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Tools/RunAndHide.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Tools/TaskList.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Tools/openstartmenu.exe |
| unpack002/Skins/Frost Glass V4/@Resources/Tools/toggle.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=259, version=25203,
count=128, id=261, version=25203,
count=18, id=260, version=25203,
count=18, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=31, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, version=25203,
count=3, id=257, productName=VS2017 v15.3.3 build 25507, version=25507,
count=90, id=1, productName=Unmarked objects,
count=1, id=265, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=260, version=25203,
count=5, id=259, version=25203,
count=125, id=261, version=25203,
count=8, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=30, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, version=25203,
count=3, id=257, productName=VS2017 v15.3.3 build 25507, version=25507,
count=93, id=1, productName=Unmarked objects,
count=1, id=265, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
Unsigned PE
Checks for missing Authenticode signature.
count=26, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=117, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=3, id=11, version=8966,
count=4, id=25, version=9210,
count=19, id=93, version=2179,
count=363, id=1, productName=Unmarked objects,
count=26, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Unsigned PE
Checks for missing Authenticode signature.
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=147, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=438, id=1, productName=Unmarked objects,
count=23, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=42, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=14, version=7299,
count=32, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=11, version=8047,
count=7, id=19, version=8034,
count=92, id=1, productName=Unmarked objects,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=32, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=131, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=44, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=103, id=1, productName=Unmarked objects,
count=26, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=260, version=25203,
count=5, id=259, version=25203,
count=125, id=261, version=25203,
count=8, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=30, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, version=25203,
count=3, id=257, productName=VS2017 v15.3.3 build 25507, version=25507,
count=93, id=1, productName=Unmarked objects,
count=1, id=265, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=259, version=25203,
count=128, id=261, version=25203,
count=18, id=260, version=25203,
count=18, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=31, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, version=25203,
count=3, id=257, productName=VS2017 v15.3.3 build 25507, version=25507,
count=90, id=1, productName=Unmarked objects,
count=1, id=265, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
AutoIT Executable
AutoIT scripts compiled to PE executables.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=152, version=20115,
count=175, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=528, id=1, productName=Unmarked objects,
count=72, id=180, version=40219,
count=28, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=26, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=117, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=3, id=11, version=8966,
count=4, id=25, version=9210,
count=19, id=93, version=2179,
count=363, id=1, productName=Unmarked objects,
count=26, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=14, version=7299,
count=32, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=11, version=8047,
count=7, id=19, version=8034,
count=92, id=1, productName=Unmarked objects,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=2, id=110, productName=VS2005 build 50727, version=50727,
count=21, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=52, id=1, productName=Unmarked objects,
count=2, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.